Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Andrew Rowley
On 12/06/2023 2:59 pm, Tom Longfellow wrote: I am worn out from all of these "learning" opportunities and want to get back to "doing" the job I am paid to do. IBM doesn't do its customers any favors with the way they handle certificates. Every other operating system installs default trusted

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Timothy Sipples
As a follow up, curl is available from Rocket Software. There's also a build of curl available here: https://github.com/ZOSOpenTools And there's a port of wget if you prefer that, but it's more of a work in progress at this instant. More information here, and contributors welcome: https://zos

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Michael Babcock
Here's the only cert I added for the RECEIVE ORDER process to continue working.  Be sure serial number matches yours. Digital certificate information for CERTAUTH:   Label: DigiCert Global G2 Root   Start Date: 2013/08/01 07:00:00   End Date:   2038/01/15 07:00:00   Serial Number: >033AF1E6A711

Re: Routing HMC message

2023-06-12 Thread Radoslaw Skorupka
W dniu 07.06.2023 o 05:57, Peter pisze: Hello Is it possible to route HMC operating system message and download them as text file to the desktop? Right now we are in the situation where TCPIP IP is not reachable but I just wanted go through all the messages loaded during IPL. AFAIK there is

USS automount facility and search/browse

2023-06-12 Thread Radoslaw Skorupka
I need to review some user home directories. However they have auto-mounted filesystems. How to search it without asking folks to logon? Note: it is not related to any hacking or unauthorized access. I can have any authority I would need, including some tricks to logon using their userid, etc.

Re: Why can't a LinuxOne run z/OS

2023-06-12 Thread Radoslaw Skorupka
W dniu 09.06.2023 o 01:33, Lennie Dymoke-Bradshaw pisze: Can someone please explain what IBM have done on the LinuxOne machines to stop them running z/OS? I ask out of curiosity only. What IBM have done? NOTHING. Simply NOTHING except some business decisions. LinuxONE can have IFL engines onl

Re: USS automount facility and search/browse

2023-06-12 Thread Rick Troth
On 6/12/23 09:03, Radoslaw Skorupka wrote: I need to review some user home directories. However they have auto-mounted filesystems. How to search it without asking folks to logon? I have not tried this on USS, but with other automounters, simply 'cd ~user' will force a mount of that user's h

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Paul Gilmartin
On Mon, 12 Jun 2023 02:49:14 +, Timothy Sipples wrote: >... >When you get "bootstrapped" you'll probably want to install curl for z/OS (or >something functionally similar) to make this process easier. > "Bootstrap" is a critical term here. It reflects the antinomy in how can I elevate mys

Re: USS automount facility and search/browse

2023-06-12 Thread Mark Jacobs
Two things I can think of. 1) cd /u/userdir - That should invoke automount for you. 2) Manually mount the file system to a directory of your choice. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get&search=markjac..

Re: Certificate differences between Z/VM and Z/OS?

2023-06-12 Thread Allan Staller
Classification: Confidential Did you transfer the certificate as text (DO NOT USE BINARY). -Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Sent: Sunday, June 11, 2023 1:29 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Certificate differences between Z/VM a

Re: USS automount facility and search/browse

2023-06-12 Thread Radoslaw Skorupka
Silly me, of course it is enough to issue cd /u/USER :-) Thank you gentlemen. -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Peter Vander Woude
What I have done, to get these certificates, is to look at the keystore on the pc, and save a copy of the certauth record from there, in base64 .cer format. Then edit it, copy and past into a dataset on the mainframe. Peter On Mon, 12 Jun 2023 08:13:54 -0500, Paul Gilmartin wrote: >On Mon, 1

Re: USS automount facility and search/browse

2023-06-12 Thread Paul Gilmartin
On Mon, 12 Jun 2023 09:12:27 -0400, Rick Troth wrote: >... >The tilde hack is a shell feature, but I'm not aware of any contemporary >shells where it doesn't work. If tilde doesn't work, then fully >qualified path to the user's home directory works. > Then, 'system("cd ~user")'. In REXX I've u

Re: USS automount facility and search/browse

2023-06-12 Thread Paul Gilmartin
On Mon, 12 Jun 2023 15:19:34 +0200, Radoslaw Skorupka wrote: >Silly me, of course it is enough to issue cd /u/USER >:-) > Not so silly. I have worked at a site where home directories were mounted at a different path. Sysadmin naiveté/creativity. -- gil

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Paul Gilmartin
On Mon, 12 Jun 2023 08:22:03 -0500, Peter Vander Woude wrote: >What I have done, to get these certificates, is to look at the keystore on the >pc, and save a copy of the certauth record from there, in base64 .cer format. >Then edit it, copy and past into a dataset on the mainframe. > Is it ASC

Re: USS automount facility and search/browse

2023-06-12 Thread Radoslaw Skorupka
W dniu 12.06.2023 o 15:29, Paul Gilmartin pisze: On Mon, 12 Jun 2023 15:19:34 +0200, Radoslaw Skorupka wrote: Silly me, of course it is enough to issue cd /u/USER :-) Not so silly. I have worked at a site where home directories were mounted at a different path. Sysadmin naiveté/creativity.

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Seymour J Metz
IMHO, both curl and get belong in the base. From: IBM Mainframe Discussion List on behalf of Paul Gilmartin <042bfe9c879d-dmarc-requ...@listserv.ua.edu> Sent: Monday, June 12, 2023 9:13 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: The new requirement

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Kurt J. Quackenbush
> I did finally get the Certificate loaded, defined and attached to my SMPE > keyring. > The jobs still fail mysteriously.The only clue being that displaying the > new key via RACF says that it is 'Incomplete' I don't know about your RACF "incomplete" issue, but I suggest you double check

Re: USS automount facility and search/browse

2023-06-12 Thread Paul Gilmartin
On Mon, 12 Jun 2023 15:39:12 +0200, Radoslaw Skorupka wrote: >... >The path is indeed different in my case. However I know the path and >obviously (?) it is the same for all the users. > I once wrote a REXX "chdir" that worked from the TSO/ISPF command line so when I entered 3.17, etc. "." mea

Re: Why can't a LinuxOne run z/OS

2023-06-12 Thread Mohammad Khan
In the famous words of Michael Corleone - it's not personal, it's strictly business. mkk On Mon, 12 Jun 2023 15:11:23 +0200, Radoslaw Skorupka wrote: >W dniu 09.06.2023 o 01:33, Lennie Dymoke-Bradshaw pisze: >> Can someone please explain what IBM have done on the LinuxOne machines to >> stop t

Re: JES2 Submitlib Bootstrap problem

2023-06-12 Thread Mark Jacobs
IBM opened an APAR for this reported problem. OA65017 Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get&search=markjac...@protonmail.com --- Original Message --- On Wednesday, May 10th, 2023 at 8:06 PM, Mark Ja

Mainframe help now available!

2023-06-12 Thread James FRSolutions
FR Solutions has programs to help find resources or build new resources for organizations in search of Mainframe professionals. With the marketplace shrinking in the MF skills area, we can help. https://www.frsolutionscorp.com/mainframe

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Charles Mills
>What I cannot find is the name or source of this unnamed thing. Name: IBM uses certificates with chains ending in two different DigiCert roots with very similar names. This is a source of confusion. DigiCert Global Root CA DigiCert Global Root G2 Someone else posted with servers use which. Get

Mainframe help now available!

2023-06-12 Thread James FRSolutions
FR Solutions has programs to help find resources or training emersion for new resources for organizations in search of Mainframe professionals. With the marketplace shrinking in the MF skills area, we can help. https://www.frsolutionscorp.com/mainframe

Re: Mainframe help now available!

2023-06-12 Thread Mike Shaw
James, Don't you mean immersion? Mike Shaw MVS/QuickRef Support Group Chicago-Soft, Ltd. On Mon, Jun 12, 2023 at 5:01 PM James FRSolutions wrote: > FR Solutions has programs to help find resources or training emersion for > new resources for organizations in search of Mainframe professionals.

Re: Mainframe help now available!

2023-06-12 Thread James FRSolutions
Yes, great catch and sorry about that, the website is correct but spell check needed here. :) Thank you. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Tom Longfellow
Thank you Charles. you have just spelled out every single step that I have already performed. The named labels, the download steps (Only the new Intermediate was required)., the upload steps, the Cert adds (yes trusted). the keyring connect to the same keyring used for the last successful loa

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Charles Mills
I suspect that one you listed first is superfluous but no matter. Does SMPE really want a client certificate? Where did you get it from? What signed it? If SMPE really wants that client certificate then you should make it the default so SMPE can find it. Are all of those certs on the ring trus

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Phil Smith III
Charles added: >I would not generally expect the necessity of installing any intermediates on >the client side. I'd phrase it more strongly: you do NOT want intermediates on a client machine, because when they expire, nobody will notice until things don't work, and won't think to check them. Th

Re: Mainframe help now available!

2023-06-12 Thread Tony Harminc
On Mon, 12 Jun 2023 at 22:13, James FRSolutions wrote: > FR Solutions has programs to help find resources or build new resources > for organizations in search of Mainframe professionals. With the > marketplace shrinking in the MF skills area, we can help. > https://www.frsolutionscorp.com/mainfr

Re: The new requirement for Certificates to communicate with IBM -- A Journey

2023-06-12 Thread Andrew Rowley
On 13/06/2023 8:04 am, Tom Longfellow wrote: I am beginning to suspect some new evil is afoot in the land of Java -- complete with unhelpful cryptic error messages. How old is your Java installation, and how old are the certificates required? It's possible that e.g. Java hasn't been updated t

Re: Mainframe help now available!

2023-06-12 Thread Tom Brennan
LOL. When things like the "Project Management Office" became common in maybe the late 1990's where I worked, they called us Resources. I remember writing a note back saying I'm not a lump of coal or even a vein of gold. The real problem though, was like you mentioned, they treated us as a s